REMARKS 



This Amendment is submitted in response to the Advisory Action dated July 22, 2004 
and in conjunction with a RCE filed concurrently herewith. 

Claim Amendments 

Claims 24-44 are pending. Applicant has canceled Claims 1, 9-12 and 20-23, and added 
Claims 24-44. No new matter has been entered by these amendments. 

Drawing Amendments 

Figure 6 in the present application has been amended at step 620 to reverse the Yes/No 
designations, to reflect Figure 6 as originally filed in the present application. 

Claim Rejections -- 35 U.S.C. § 103 

On page 5 of the Final Office Action, claims 1, 7-12 and 18-23 have been rejected under 
35 U.S.C. § 103(a) as being unpatentable over Moy (U.S. Patent Number 5,425,102) in view of 
Guthrie et al (U.S. Patent Number 6,161,185). That rejection is respectfully traversed and 
reconsideration of the claims is requested. These claims have been cancelled and new claims 23- 
44 have been added. Neither Moy nor Guthrie disclose or suggest the present invention as 
claimed. 

For example, exemplary Claim 24 in the present application recites the step of: 

"prior to the client computer system completing a boot process, and before an operating system 
controls the client computer system, prompting a user to enter the primary password' 

On page 5 of the Final Office Action, it is suggested that Moy teaches "prior to said client 
computer system completing a boot process, prompting a user to enter said primary password 
(FIG. 3)." However, Moy is clearly teaching a method to allow prompting of hints to guess the 
password in order to access a file, (see col. 1, lines 5-10.) Moy teaches nothing about performing 
a password computer security methodology during the boot process of a computer. 
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A second example is that Claim 24 in the present application further recites the step of: 

''transmitting the user's response to the interrogative to the server" 

Moy nowhere teaches such a step. While Moy teaches giving hints at the actual primary 
password, the system does not expect a response to the interrogative that is different from the 
primary password. Instead, the password hints provided by Moy are intended to jog the user's 
memory into entering the primary password (see col. 2, lines 30-36). 

As another example, Claim 24 in the present application further recites: 

"transmitting the users primary password in response to the correct entry of the interrogative 
response to the client computer system prior to completing the boot process" 

While on page 6 of the present Office Action, the Examiner admits that Moy is silent with 
respect to the transmission of a password from a server, the Examiner relies upon Guthrie to 
teach a server recovering a primary password for a client. However, nothing within Guthrie 
describes recovering a primary password for a client . Instead, Guthrie describes a method of 
server-controlled access to network resources, software applications running on servers, internet 
or world wide web pages, databases, files, or other electronic data (col. 1, lines 10-28). Nowhere 
does Guthrie, Moy, or the prior art teach or suggest "transmitting the user's primary password in 
response to the correct entry of the interrogative response" as is recited in exemplary Claim 24 in 
the present application. Guthrie merely teaches -that a "user's password expires after a pre- 
determined period of time, thereby requiring users to change their passwords" and that the server 
accepts "only a single one-time password value which expires within a short period of time to 
thereby foil a malicious user's attempt at 'hammering'" (see col. 2, lines 20-57). As can be seen, 
Guthrie provides no teaching if an interrogative' methodology, or, more importantly, the 
transmission of a primary password across the network to the client computer in response to a 
correct entry in response to an interrogative method. Neither reference suggests transmitting the 
primary password to the client computer. " ' 

Last, exemplary Claim 24 in the present application recites "displaying the user's primary 

password on the client computer system, wherein the recovery of the primary password is completed" Neither 

Moy, nor Guthrie teaches displaying the actual primary password for the user. 
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In summary, the two cited prior art references lack any showing or suggestion of the 
present invention. For example, at least the following steps are not shown or suggested. 

"prior to the client computer system completing a boot process, and before an operating system 
controls the client computer system, prompting a user to enter the primary password' 

\ '< . .. . 

4 'transmitting the user's response to the interrogative to the server" 

i : j, ■' ; 

"transmitting the users primary password in response to the correct entry of the interrogative 
response to the client computer system prior to completing the boot process " 

"displaying the user's primary password on the client^computer system, wherein the recovery of 
the primary password is completed'' . \ . . <■.. 
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